Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3231382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          kVUk43zjWVm5B7LsqnoFfzDXlpQuh4zwE/QJXYhAk1Y=
Subject key identifier:   1C:5B:A4:46:6F:7C:2A:B7:47:00:0D:E4:04:EA:50:60:18:79:C8:AB
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       6D9620ACA27D9B4338E3B0B8BB0050D6A65F7FB3
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231382e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:15 +0000
ROA not before:           Wed 03 Apr 2024 18:25:15 +0000
ROA not after:            Wed 02 Apr 2025 18:30:15 +0000
asID:                     262691
IP address blocks:        179.108.218.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:96:20:ac:a2:7d:9b:43:38:e3:b0:b8:bb:00:50:d6:a6:5f:7f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:db:3f:3b:0a:80:1d:31:f3:25:ae:a6:56:
                    48:2d:d9:1f:f3:3a:bd:25:5c:9d:db:b5:b3:77:f3:
                    4b:2b:3f:eb:24:06:ce:b4:f3:45:a0:0d:f7:3f:d3:
                    54:cd:2a:cd:0b:61:37:01:00:27:1a:33:c2:e9:88:
                    01:ce:65:ad:68:c5:a7:5d:f3:0a:3f:d8:73:44:75:
                    92:1d:97:63:24:e4:6a:2c:72:f0:2f:85:34:f8:78:
                    e9:d3:e0:82:62:06:0b:da:83:0c:c2:4d:25:41:9f:
                    29:a9:a8:e7:bb:57:fa:44:42:a1:8f:14:90:2c:b5:
                    c3:87:83:49:cc:12:30:2f:92:98:2b:ce:bb:6e:bd:
                    d5:08:2f:f0:a7:d6:d3:ca:ab:88:af:da:50:ce:0d:
                    d0:59:aa:27:a3:2c:f1:70:0b:86:80:97:f6:4c:70:
                    2b:c6:33:9a:27:fe:81:17:3b:d1:21:6b:07:c5:53:
                    73:c4:46:04:c6:ca:2b:51:89:1f:66:59:7b:9b:53:
                    1b:4a:04:13:07:1c:98:62:af:7f:68:d2:31:11:07:
                    de:81:18:4d:37:c2:37:e4:7f:e5:26:c5:0a:35:ac:
                    4d:95:33:bd:83:ae:e8:7e:b2:21:36:70:fd:9f:ed:
                    45:bd:24:3f:fa:82:5d:8e:5a:a5:df:dd:a0:f4:e7:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5B:A4:46:6F:7C:2A:B7:47:00:0D:E4:04:EA:50:60:18:79:C8:AB
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:62:e3:62:bc:42:d6:16:25:65:89:44:89:18:80:91:df:d1:
         4c:aa:ec:ff:68:92:f3:39:40:bd:17:b1:42:28:c3:82:fa:cb:
         3b:d3:a8:72:cc:c3:17:eb:a4:47:11:76:5d:b4:37:18:ba:19:
         e9:7e:bf:32:ad:e9:38:07:d2:7e:e5:44:aa:15:45:0e:46:8b:
         8f:f8:69:76:2b:44:d1:fe:32:13:ff:30:a1:65:f7:5a:00:2d:
         86:90:c9:e0:1e:51:fb:77:d9:73:c6:c7:8b:08:28:bf:b2:66:
         66:b9:eb:cc:1a:97:07:4f:e7:06:c1:02:28:ab:09:b1:8c:e7:
         d9:75:92:2d:58:a8:76:c8:7d:fc:55:92:42:ba:a1:54:55:a3:
         26:f5:55:1d:60:24:0a:d6:f2:48:e7:66:3c:13:db:20:85:98:
         87:cb:75:dd:30:ec:61:02:ad:5d:77:66:45:a5:9c:05:83:0c:
         e7:de:c6:53:33:6f:e0:36:eb:b8:64:e1:ec:01:24:68:2f:aa:
         fe:5b:ad:50:89:d9:85:c9:2c:7e:68:b5:0d:80:0b:cf:02:50:
         56:09:ed:cd:b0:dc:4e:9f:66:9e:bc:04:e3:66:2c:7b:10:37:
         88:fd:b4:fc:05:2a:9c:6d:9a:1e:1d:22:ee:14:d7:3e:91:d7:
         bd:16:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org